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We present two robust quantum key distribution protocols against two kinds of collective noise, 
following some ideas in quantum dense coding. Three-qubit entangled states are used as quantum 
information carriers, two of which forming the logical qubit which is invariant with a special type 
of collective noise. The information is encoded on logical qubits with four unitary operations, 
which can be read out faithfully with Bell-state analysis on two physical qubits and a single-photon 
measurement on the other physical qubit, not three-photon joint measurements. Two bits of 
information are exchanged faithfully and securely by transmitting two physical qubits through a 
noisy channel. When the losses in the noisy channel is low, these protocols can be used to transmit 
a secret message directly in principle. 
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I. INTRODUCTION 

Quantum dense coding and quantum teleportation are 
two typical examples in quantum information exploit- 
ing striking nonclassical properties of entangled states 
to perform otherwise impossible tasks. Quantum dense 
coding, which was first proposed in 1992 enables 
the communication of two bits of classical information 
with the transmission of a qubit. This feature makes 
it have a good application in secure quantum communi- 
cation 0, yj]. Quantum dense coding was demonstrated 
by using photon pairs entangled in polarization in 1996 
[4| and subsequently was investigated experimentally by 
using some other quantum systems, such as continuous 
variables nuclear magnetic resonance [6[ and atomic 
qubits |7|. The theoretical researches have been broad- 
ened to high-dimension quantum states @, more than 
two entangled qubits [|| and hyperentangled quantum 
states @. 

In quantum dense coding, the Bell-state analysis 
(BSA) is one of the key important steps. Although 
the four Bell states are orthogonal to each other and is 
deemed to be discriminated deterministically in principle, 
BSA is always a technical difficulty, which yielding low 
efficiencies and low discrimination fidelities. Using only 
the polarization degree of freedom of photons, three Bell 
states can at best be discriminated with linear optics, 
which reduces the attainable channel capacity of quan- 
tum dense coding from 2 bits to log23 ~ 1.585 bits Q. 
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Recently, cross-Kerr nonlinearit y w as used to implement 
two-qubit controlled-NOT gate , whose character can 
also be used to solve the BSA problem. Furthermore, 
hyperentanglement (i.e., entanglement in more than one 
degree of freedom (DOF)) enables a full BSA in polariza- 
tion DOF with linear optics In particular, Schuck 
et al. [IH proposed a complete deterministic linear-optics 
BSA by employing the intrinsic time-energy correlation 
of photon pairs generated with high temporal definition 
in 2006. If we can control the time of arrival of these 
two photons at beam splitter (BS), i.e, make them arrive 
at the BS simultaneously, these four Bell states can be 
discriminated faithfully in principle and the experiment 
gives its success probability between 81%-89%. 

Although there are many kinds of physical systems 
which can be selected by quantum communication, pho- 
ton is the most popular one, relying on its good feature 
in preparation and manipulation. However, during the 
transmission, the polarization DOF of photons is inci- 
dent to be influenced by the thermal fluctuation, vibra- 
tion and the imperfection of the fiber, which we call them 
noise in total. At present, we always suppose the noise 
in a quantum channel is a collective one jl3| . That is, 
the fluctuation of noise is slow in time. If several pho- 
tons transmit through the noisy channel simultaneously 
or they are close to each other, the alternation arising 
from the noise on each qubit is identical. With this kind 
of noise, several methods have been proposed to cancel or 
reduce the noise effect, such as entanglement purification 
[T3 |, quantum error correct code (QECC) [15|], single- 
photon error rejection [l|| and decoherence-free subspace 
(DFS) [13, Ell- QECC encodes one logical bit into sev- 
eral physical qubits according to the kind of noise, and 
the user measures the stabilizer codes to detect the errors 
and then correct them. Compared with QECC, single- 
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photon error rejection schemes require less quantum re- 
source, although they succeed probabilistically. Entan- 
glement purification is a method to distill a maximally 
entangled states from some less-entanglement states by 
sacrificing several samples affected by the noise. The 
influence of noise can only be reduced in entanglement 
purification and infinite steps are needed to get a per- 
fect maximally entangled state. DFS can be composed 
of several qubits which suffer from the same noise and 
compensate the effect of noise, and then it posses the in- 
variability against the noise. This feature can be used 
to encode messages in quantum communication over a 
noisy channel. Boileau et al. [l8[ proposed a quantum 
key distribution (QKD) scheme with a collective random 
unitary noise by using linear combinations of two singlet 
states 

In this paper, we present two fault-tolerant quantum 
key distribution schemes against two different kinds of 
collective noise, the collective-dephasing noise and the 
collective-rotation one, following some ideas in quantum 
dense coding. Three-qubit entangled states are utilized 
as quantum information carriers. Each logical qubit 
transmitted is composed of two physical qubits and is in- 
variant during the transmission. The message is encoded 
on each logical qubit transmitted with one of four unitary 
operations and can be read out with a Bell-state analy- 
sis and a single-photon measurement on each three-qubit 
quantum system, not a three-qubit joint measurement 
(i.e., a Greenberger-Horne-Zeilinger (GHZ) state mea- 
surement). Two bits of information are exchanged faith- 
fully and securely by transmitting two physical qubits 
through a noisy channel. When the losses in the noisy 
channel is low, our quantum cryptography schemes can, 
in principle, be used to transmit a secret message directly. 

II. FAULT TOLERANT QUANTUM KEY 
DISTRIBUTION BASED ON QUANTUM DENSE 
CODING WITH COLLECTIVE NOISE 

A. review of quantum cryptography based on 
quantum dense coding in an ideal condition 

We review the basic principle of quantum cryptogra- 
phy based on quantum dense coding in an ideal condition 
first @, Q • Suppose the receiver Alice wants to share a 
set of key with the sender Bob. She prepares a sequence 
of Einstein- Podolsky- Rosen (EPR) pairs in which each is 
randomly in one of four Bell states 

\ ( j> ± ) AB = ^=(\oo)±\n}) AB , (l) 

1^)^ = ^(101) ±110))^, (2) 

where the subscripts A and B represent two entangled 
photons. |0) and |1) are the two eigenvectors of a z . Alice 
picks up photon B in each pair to form the sequence Sb 
and sends it to Bob who performs one of four unitary 



operations on each photon in the sequence Sb randomly. 
These four operations are 

U 00 = £/ 7 = /=|0)(0| + |l)(l|, 

U 01 = U z = a z = \0}{0\-\1){1\, 

U w = U x = a x = |X><0] + j0><lj, 

Uu = 0i, = -«r w = |l)<O|-|O>(l|. (3) 

The subscripts 00, 01, 10 and 11 are the two bits of infor- 
mation represented by the corresponding operations. a x , 
<7 y , <t z are Pauli operators. These four unitary operations 
will change the four Bell states from one to another. For 
example, operators [Too, Uqi, ?7io and U\\ can transform 
the state \cf) + ) into \(j) + ), \(j>~), and l^ - ), respec- 

tively. After the operations, Bob transmits the sequence 
Sb back to Alice who knows the original states and per- 
forms two-photon Bell-state measurements on the photon 
pairs. In this way, Alice can get the information of op- 
erations Bob performed and she can share a sequence of 
secret key with Bob. As two bits of key can be shared by 
means of only one photon being transmitted, this quan- 
tum information process is named as quantum dense cod- 
ing. 

When there is noise in the transmission of photons, we 
can use a similar entangled state to implement quantum 
dense coding, which can be written in a general form 

\^ ± )ab = A=(\0) a \0l)b±\1)a\U)b), 

\^)ab = -j=(\0)a\1l)b ± \1)a\0l)b). (4) 

Here the subscript L denotes the logical qubit, which 
can be made of several physical qubits experiencing the 
same noise and then compensating the noise effect due 
to the peculiar relationship between them. The logical 
qubits are invariant with the noise and are constructed 
according to the form of noise. 

It is well known that quantum dense coding can be 
used to improve the capacity of secure quantum commu- 
nication [2 Q • The security of quantum communication 
is its most important character, compared with classi- 
cal communication. If quantum dense coding cannot be 
used for secure quantum communication, it will loss the 
significance as a classical signal is far easier to be pre- 
pared and robust against the channel noise. For instance, 
in a classical way, Alice and Bob can communicate eas- 
ily with the two states |0) and |1) against a collective- 
dephasing noise shown in Eq.([S]). Also they can commu- 
nicate by using the two states | + y) = 771 (|0) + i|l)) 

and I — y) — -^(|0) — i|l)) to avoid the effect of the 
collective-rotation noise shown in Eq.(fTTj). However, a 
secure quantum communication resorts to at least two 
nonorthogonal states [l9l - [27| . That is, it requires that 
the superposition of two eigenvectors is also free to the 
collective noise. The two classical states {|0),|1)} are 
immune to a collective-dephasing noise, but their super- 
position is not. So do the two states {| + y), | — y)} to a 
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collective-rotation noise. We will introduce two methods 
to construct a logical qubit against two kinds of collective 
noise, which will retain the security of quantum cryptog- 
raphy simultaneously. We discuss them in detail below. 



B. Quantum cryptography based on quantum 
dense coding against a collective-dephasing noise 

A collective-dephasing noise can be described as 

U dp \0) = |0>, U dp \l)=e i *\l), (5) 

where cj> is the noise parameter and it fluctuates with 
time. In general, a logical qubit encoded into two physi- 
cal qubits with antiparallel parity is immune to this kind 
of noise as these two logical qubits acquire the same phase 
factor 



\0 L ) = |01), |1 L ) = |10>. 



(6) 



\*%)ab iB2 = — (|0)a|01) BiB2 ± |1) a |10)b iB2 ), 



In this way, the four entangled logical states used for 
quantum cryptography based on quantum dense coding 
against a collective-dephasing noise can be made up of 
four three-qubit entangled states as 

1 

\V%)ab iB2 = -^(|0) A |10)fl lBa ± |1)a|01) BiB2 ). (7) 

The logical qubit B is composed of two physical qubits 
B\ and B 2 . 

Our quantum cryptography scheme based on quantum 
dense coding against a collective-dephasing noise works 
as follows. 

(1) Similar to Refs. @, [24j], Alice prepares a se- 
quence of quantum systems in the entangled state 
\<*> + )ab = 75(|0)|0 L ) + \1)\I l ))ab = ^(|0)a|01) BiS2 + 
|1)a|10)biS 2 )- Alice divides the quantum systems into 
two photon sequences, Sa and Sb- Sa is composed of 
all the logical qubits A in the quantum systems and Sb 
is made up of the logical qubits B, which is composed of 
two physical qubits B\ and B 2 . 

(2) Alice sends the logical qubit sequence Sb to Bob 
and keeps the sequence Sa- 

(3) After receiving the sequence Sb, Bob chooses ran- 
domly a subset of logical qubits as the samples for er- 
ror rate analysis and the other logical qubits make up 
of the message sequence Sbm for generating the private 
key. Bob measures each logical qubit in the samples by 
choosing randomly one of the two bases of = af 1 ® erf 2 
and erf = o x x q a B 2 ^lso he tells Alice which logical 
qubits are chosen as samples. Under these two bases, the 
original entangled state can be written as 

1 

dpi 



\^ v )a Bi b 2 



-^(\0)a\01) Bi b 2 + \1)a\10) Bi b 2 ) 



[\+)a(\ + +)-\--)) Bi b 2 



That is, the outcomes obtained by Alice and Bob are 
correlated if they choose the same bases for their logical 
qubits. However, the vicious action done by Eve will 
destroy this correlation and be detected, same as those in 
Refs. [22|, [28[. Alice and Bob can exploit the correlation 
to check the security of the transmission of the logical 
qubits run from Alice to Bob. 

(4) For the message sequence Sbm, Bob operates each 
logical qubit with one of the four unitary operations, 
{fiooj r^oi, ^iOj ^11} which is made up of two unitary op- 
erations on two physical qubits, i.e., 



^00 


= 0/ 


= h 8 


h, 




Sloi 


= r> 2 








Slio 




= u xl 


®u x2 , 




Slu 


= fly 


= Uyl 


®u x2 . 


(9) 



The subscripts of Vl denotes the code {00, 01, 10, 11}, and 
the subscripts 1 and 2 represent the unitary operations 
performing on the photons B\ and B 2 , respectively. The 
relation between the initial state, final state and the op- 
erator is shown in Table I. These four operations will not 
drive the states prepared by Alice out of the subspace 
S = {\®%)ab 1 b 2 ,\^%)ab 1 b 2 }- In other words, the 
states operated by Bob are also antinoise when they are 
transmitted back to Alice through a collective-dephasing 
noise channel. After the unitary operation, Bob sends 
the sequence Sbm back to Alice. 



TABLE I: The relation between the initial state \ip)i, the final 
state \ip)f and the unitary operation. 
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(5) Alice picks up each entangled quantum system from 
the two photon sequences Sam and Sbm- Here Sam 
is made up of the remaining logical qubits in Sa after 
the first sampling for analyzing error rate of the first 
transmission from Alice to Bob. Alice performs a Bell- 
state measurement on the two photons AB\ and a single- 
photon measurement on the photon B 2 with X = o x 
basis for distinguishing the four GHZ states \^ p )ab 1 b 2 

and \^^ p )ab 1 b 2 - These four states to be discriminated 
can be written as 

\*%)AB lBa = -^=(\4> ± )aB 1 ® \ + )B 2 - \^ T )A Bl ® \-)B 2 ), 
\*%)A Bl B 2 = -j=(\tp ± )AB 1 ® \+)B 2 + H' T )A Bl ® |-)S 2 ). 



+|-MI-+)-| + -»b iB2 ]. 



(8) 



(10) 



4 



Here |±) = (l/v2)(|0)±|l)) are two eigenvectors of Pauli 
operator a x . From this expression, one can see that with 
these two measurement outcomes Alice can distinguish 
these four three-photon GHZ states deterministically and 
read out the operations done by Bob on the logical qubits 
B in principle. 

(6) For checking the security of the second transmission 
from Bob to Alice, Alice chooses randomly a subset of 
the outcomes of the measurements on three-qubit states 
operated by Bob as the samples for error rate analysis, 
similar to Ref. [2| . She requires Bob tell her his operations 
on these samples and then analyzes the security of the 
second transmission by herself. If the error rate is very 
low, she tells Bob that their quantum communication 
is secure in principle; otherwise, they will discard their 
outcomes and repeat their quantum communication from 
the beginning. 

(7) If their quantum communication is secure, Alice 
and Bob exploit error correction and privacy amplifica- 
tion techniques to distil a private key, same as Ref. [23[ . 

As the logical qubits are always in the maximal 
mixture of |0l) and during the transmission, the 
intercept-resending attack strategy by Eve will not work. 
The secret message are encoded on logical qubits with 
four unitary operations , which may be eavesdropped by 
inserting spy photons [29j j , in particular by inserting delay 
photons as the invisible photons with a different wave- 
length compared to the legitimate photons can be fil- 
trated out by a special filter (2t| before Bob performs 
his operations. In order to guarantee the security, Bob 
has to select parts of samples to check the multiphoton 
(n > 2) rate as the attack with spy photons will increase 
the number of photons in each quantum signal. In detail, 
Bob can choose another subset of logical qubits B and an- 
alyzes its multiphoton rate with photon number splitters 
(PNSs). That is, for each logical qubit B, Bob uses two 
PNSs to split each physical qubit (Bi and B2) and then 
measures the number of the photons in each legitimate 
physical qubit. If the multiphoton rate is unreasonably 
high, Bob terminates the transmission and they repeats 
the communication from the beginning, same as Ref. [29j j . 
Certainly, the technique of photon number splitters is 
not mature in the application of quantum communica- 
tion. At present, Bob can use beam splitters instead of 
PNSs to complete the task of analyzing the multiphoton 
rate, same as Ref. p9| . 

Without Trojan horse attack with spy photons, the 
transmission of the sequence Sb from Alice to Bob is 
completely same as that in Bennett-Brassard-Mermin 
1992 (BBM92) quantum key distribution (QKD) proto- 
col [22| which has been proven secure [30, Hl|. Thus, 
there is no problem in the security of the transmission of 
the sequence Sb from Alice to Bob in principle. On the 
other hand, the reduced matrix of each logical qubit B 

' 1 N 
v 1 / 

Eve cannot get useful information if she only eavesdrops 
the transmission from Bob to Alice in principle. That is 



from Bob to Alice is ps = 



which means that 



to say, our quantum cryptography based on fault toler- 
ant quantum dense coding against a collective-dephasing 
noise is secure in principle. 



C. Quantum cryptography based on quantum 
dense coding against a collective-dephasing noise 

Another kind of noise model called a collective-rotation 
noise operates as 



U r \0) = cos6>|0) + sin0|l), 
U r \l) = -sin0|O) + cos0|l) 



(11) 



The parameter depends on the noise and fluctuates 
with time. With such a type of collective noise, and 
are invariant. Logical qubits can be chosen as 



10^ = 10+), iu) = ir>. 



(12) 



Then the states for quantum cryptography based on 
quantum dense coding can be chosen as 

Wt) ABl B 2 = ^=(|O)a|0 + )b 1 B 3 ± \1)a\^} Bi B 2 ), 
\*r)A Bl B 2 = -j=(\0)a\^-) Bi B 2 ± \1)a\<P + ) Bi B 2 )- (13) 

Also, Alice divides the quantum systems into two pho- 
ton sequences, Sa and Sb- She sends the logical qubit 
sequence Sb to Bob and keeps the sequence Sa- After re- 
ceiving the sequence Sb , Bob chooses randomly a subset 
of logical qubits as the samples for error rate analysis and 
the other logical qubits make up of the message sequence 
Sbm for generating the private key. Bob measures each 
logical qubit in the samples by choosing randomly one of 



the two bases cr? = af 1 < 



)cr? 2 and cr^ = cr^ 1 ( 



Also 



he tells Alice which logical qubits are chosen as samples. 
Under these two bases, the original entangled state can 
be written as 

\*t)AB = i(|0) A (|00) + |ll)) BlS2 

+|1)a(|01) - |io» Blfla ) 

= -/=(l + V)a\ +v)b 1 \ -v)b 2 

+\-v)a\-v)bA+v)b*)- (14) 

That is, the outcomes obtained by Alice and Bob are 
correlated if they choose the same bases for their logical 
qubits. For the message sequence Sbm, Bob operates 
each logical qubit with one of the four unitary operations 
{0oo, ©oii ©lOj @n} which can be written as 



e 00 


= e 7 


= h (8 




e i 


= e 2 


= u zl 


®u z2 . 


Bio 


= e x 


= u zl 


® u x2 


6n 


= e. 


= h& 


Uy 2 - 



(15) 
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With these four operations, Bob can manipulate the 
total state of the quantum system ABiB 2 and then sent 
back the two photons B\B 2 to Alice. The relation be- 
tween the initial state, final state and the operation is 
shown in Table II. After the operation, Bob sends the 
sequence Sbm back to Alice. 



TABLE II: The relation between the initial state \4>)i, the 
final state \ip) j and the unitary operation. 
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As these four entangled states in Eq. (IT5|) are orthog- 
onal, they can be discriminated faithfully in principle. 
With the measurement results and the initial states, Al- 
ice can deduce the unitary operations performed by Bob. 
Different from the case with a collective-dephasing noise, 
Alice first perforins a Hadamard operation on Bi and 
then takes a Bell-state measurement on A and B\ and a 
single-photon measurement on the photon B2 ■ The effect 
of the Hadamard operation can be written as 



1 



|0)^— (|0} + |1)), 
|1>->^(|0>-|1». 



(16) 



Under the Hadamard operation, the four states in 
Eq.(fT3"|) are transformed into 

\*t )a Bi b 2 -> -^=(|^ ± )ab 1 <8 \+)b 2 - \^ t )a Bi ® |-}b 2 ), 

\*?)AB lBa -> ^(|V ± >AB 1 <8 \+)b 2 - \4> T )A Bl ® h>B 2 ). 



18, 27] to prevent a logical qubit from noise or decrease 
the success probability of faithful transmission of qubits 
flrl [13] . When quantum dense coding is used for quan- 
tum cryptography in a noisy channel, three-photon quan- 
tum systems are the optimal ones as the quantum dense 
coding based on the measurements on wavepackets is not 
easy to be implemented at present. If these two quan- 
tum dense coding schemes are not used for secure quan- 
tum communication, they are not optimal as the effect 
of the two kinds of collective noise can be avoid with 
two orthogonal single-photon states and each qubit can 
carry one bit of information. However, only two orthog- 
onal single-photon states cannot ensure the security of 
quantum cryptography. 

If the losses in the noisy channel is low, our quantum 
cryptography schemes can be used for transmitting secret 
message directly, same as quantum secure direct commu- 
nication schemes @, [H, |32r|35j]. In this time, Alice and 
Bob should first ensure the security of the first trans- 
mission, i.e., that for the sequence Sb, and then Bob 
encodes his secret message on the sequence Sbm with 
the four unitary operations, same as Ref. Q. 

In summary, we have presented two fault-tolerant 
quantum key distribution protocols against two different 
kinds of collective noise, following some ideas in quan- 
tum dense coding. Each logical qubit, which is invari- 
ant when it is transmitted in a collective-noise channel, 
is made up of two physical qubits. The information is 
encoded on logical qubits with four unitary operations, 
which will not destroy the antinoise feather of the quan- 
tum systems. Alice can read out Bob's message with a 
Bell-state analysis and a single-photon measurement on 
each three-qubit quantum system, not three-qubit joint 
measurements (i.e., GHZ-state measurments). Two bits 
of information are exchanged faithfully and securely by 
transmitting two physical qubits through a noisy channel. 
When the losses in the noisy channel is low, our quan- 
tum cryptography schemes can, in principle, be used to 
transmit a secret message directly. 



(17) 



The combinations of a Bell-state measurement and an X 
basis single-photon measurement are different for these 
four states. In this way, Alice can read out the infor- 
mation about the operations done by Bob and they can 
share two bits of information by means of transmitting 
two physical qubits in a collective-rotation noise. 

As for the security of this quantum cryptography pro- 
tocol, it can be made as the same as the case with a 
collective-dephasing noise. 



III. DISCUSSION AND SUMMARY 

In quantum communication with a noisy channel, the 
two parties need introduce some other physical qubits 
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